Cybersecurity basics

Six lessons for people with no technical background: what we protect and why, who attacks in 2026, how an attacker thinks, phishing, malware and ransomware, and identity and passwords. They include the attack stages from both sides, a phishing email whose signs you find, and a password strength calculator.

OverviewSix lessons for people with no technical background: what we protect and why, who attacks in 2026, how an attacker thinks, phishing, malware and ransomware, and identity and passwords. They include the attack stages from both sides, a phishing email whose signs you find, and a password strength calculator.
What is cybersecurity? What we protect, and from whatFrom zero: assets, threats, vulnerabilities and risk, the confidentiality-integrity-availability triad, kinds of controls, and defence in depth. With an interactive CIA explorer.
The 2026 threat landscape: who attacks, why and howThe numbers from the two biggest yearly reports (Verizon DBIR and IBM Cost of a Data Breach 2026) in plain words, the kinds of attackers and their motives, and the best-known attacks: ransomware, phishing, malware and the supply chain.
How attackers think: the kill chain and MITRE ATT&CKAn attack is not one moment but a chain of stages, and each stage is a chance to spot and stop the attacker. You walk the seven stages in an interactive drill that pairs each attack step with its defence, then meet the fifteen ATT&CK tactics of version 20.
Phishing and social engineeringHow attackers hack the person instead of the machine: urgency, fear, trust and curiosity. You find six signs in a training message yourself, and learn the kinds of phishing, the SPF, DKIM and DMARC mail checks, and adversary-in-the-middle attacks.
Malware and ransomware: how it gets in and how to stop itHow a virus, a worm, a trojan, spyware and ransomware differ, how each one gets in, how ransomware grew into "double extortion" that steals data before encrypting it, what to do in the first minutes if your machine is hit, and why CISA advises against paying. It includes a drill that spots a malicious file by its fingerprint.
Identity, passwords and multi-factor sign-inWhy your account became the front door, how to build a strong password without the pain, and the ladder of sign-in strength from SMS to passkeys. With a password strength calculator that never asks you to type one.
Wrap-up and resourcesThe takeaways and glossary of this track.